hey

Then from the session object, you can get the time the session was created

If that time is before your threshold, then call the revokeSession function on the session object.

Then user should be logged out

In session.init

On the backend

I'm going down the right path here?

override: {
          apis: (originalImplementation) => {
            return {
              ...originalImplementation,
              refresh: async function (input) {
                if (originalImplementation.refresh === undefined) {
                  throw Error("Shouldn't hit this"); // TODO: figure this out
                }
                try {
                  const session = await originalImplementation.refresh(input);
                  console.log("Session: ", session);
                } catch (err) {
                  throw Error(err);
                }
              },

?

If you want help that requires a lot of hand holding, you can start a subscription with us for dedicated support. Hope this makes sense